Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft
File:                     CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft (raw, json)
Hash identifier:          bkbPePaUp5ESh5xyizhja6WTwbmANiy3pdb7OL3yOts=
Subject key identifier:   4C:5C:88:DC:71:7F:38:18:33:A1:22:4A:DE:37:F7:8B:A5:13:BF:C3
Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D
Certificate issuer:       /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D
Certificate serial:       583C23694E8137CE5ABCF48CDB1812E92CC1F483
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 02:35:49 +0000
Manifest this update:     Wed 17 Jun 2026 02:30:49 +0000
Manifest next update:     Thu 18 Jun 2026 03:36:49 +0000
Files and hashes:         1: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl (hash: Z1JErny4YDvBcGBBfybFdGjvflO0dV54L/2UigHflSY=)
                          2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl
                          rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3c:23:69:4e:81:37:ce:5a:bc:f4:8c:db:18:12:e9:2c:c1:f4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D
        Validity
            Not Before: Jun 17 02:30:49 2026 GMT
            Not After : Jun 18 03:36:49 2026 GMT
        Subject: CN=4C5C88DC717F381833A1224ADE37F78BA513BFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:5a:68:a4:fb:11:4a:53:19:b7:9c:cf:dd:
                    21:81:1c:6b:08:6d:60:96:88:4e:01:50:c7:51:ad:
                    10:d8:43:20:7d:dd:7d:bf:de:96:f3:d9:e8:cf:3e:
                    10:f4:8c:69:72:5b:79:c5:16:c9:09:96:bd:58:9c:
                    d3:65:68:d2:39:74:83:2c:0a:06:9b:63:80:fc:03:
                    76:a4:a1:63:7c:40:37:42:e0:34:ff:85:72:c0:ea:
                    6e:11:3e:1a:62:81:f1:1e:3f:41:21:2d:52:64:84:
                    ae:cb:82:bf:ba:b5:fb:af:a0:3a:a8:ba:ad:a0:c8:
                    be:e6:3d:b7:7a:4c:8c:ec:2d:1b:91:64:6b:e5:54:
                    35:47:7a:de:eb:3c:cd:7b:82:f7:3b:93:c3:08:e9:
                    e9:79:4f:77:3f:f7:f1:0f:db:35:1b:e3:fb:7d:06:
                    49:a6:10:27:07:ac:76:af:e5:ba:29:b0:19:47:b0:
                    bf:71:67:1f:22:56:7b:54:b2:e6:50:45:95:4c:f1:
                    db:62:00:0f:ac:e0:85:e0:c0:3c:a6:9f:ab:ae:fb:
                    54:6a:8d:cc:7e:8b:c4:bb:ce:f1:fa:d1:07:b2:2a:
                    ee:c2:6e:84:a2:5b:87:a3:64:c6:cc:3f:8d:72:52:
                    1b:cf:f7:c4:21:18:0f:56:ac:67:49:c2:e4:88:47:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5C:88:DC:71:7F:38:18:33:A1:22:4A:DE:37:F7:8B:A5:13:BF:C3
            X509v3 Authority Key Identifier:
                keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:c4:50:e2:38:f1:c6:16:a9:ab:1c:a5:11:2d:49:2f:84:
         70:6b:d1:97:a5:9b:53:66:20:c8:15:e3:35:14:b8:6d:da:94:
         cb:f6:ad:88:c5:d6:fe:1b:b3:d3:50:ad:4b:91:44:fe:e1:84:
         10:ed:a7:79:e2:b2:4f:02:f8:52:0d:54:83:6e:a7:b5:c7:f0:
         58:39:36:d1:60:09:43:3f:ae:f0:ac:39:f9:56:49:3d:68:ed:
         a5:41:af:80:be:5f:61:00:6e:4d:26:7e:d7:0c:a9:0e:3a:de:
         97:64:28:85:e0:56:fd:7b:cf:d1:2d:02:a8:fa:74:78:eb:30:
         74:5a:06:6f:c9:9b:d6:2e:f8:84:57:ec:46:c8:8f:8c:8f:e5:
         61:33:84:e1:15:d8:98:4e:f4:3c:44:72:a6:01:4c:e4:94:b0:
         4b:df:98:8c:fb:99:52:8f:ea:a5:28:f5:44:6d:bd:bd:96:f8:
         fe:2f:0a:9e:49:91:ae:c1:d7:b9:32:b1:77:48:56:74:68:3e:
         1d:cf:19:85:ef:a0:44:99:8b:0b:03:61:6f:00:1e:55:44:31:
         06:07:23:a4:6d:9e:56:1e:13:cb:c4:03:b9:cc:d0:9c:ce:7b:
         20:d3:7d:ea:71:58:ca:1d:d2:ad:f2:e7:1e:5a:d8:97:a9:ac:
         bb:a4:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:08:14 2026 by rpki-client